Prohibits state and county boards from considering written testimony submitted by an individual member of the public unless the written testimony includes certain information necessary for the board to verify the authenticity of the testimony and communicate with the testifier. Prohibits boards from disclosing any personal information obtained through written public testimony, except the name of the testifier, unless authorized by the testifier. Requires each house of the Legislature to adopt or amend rules to apply the written public testimony verification process to certain hearings conducted by its standing committees. Effective 1/1/2028.
Prohibits the sale of geolocation information and internet browser information without consent. Prohibits the sale of data collected through eavesdropping or through an application operating in the background of a device that uses the device's microphone. Establishes exemptions for lawful investigations conducted by law enforcement agencies, customer proprietary network information, and certain telecommunication carriers. Effective 1/1/2077. (SD2)
Prohibits the collection, sale, or disclosure of any driver data that is obtained by a motor vehicle or other connected car service, feature, or application to any third-party without the explicit consent of the owner or lessee of the vehicle. Designates exemptions. Requires any disclosure notification for any data collection to be clear and conspicuous. Effective 7/1/2050. (SD1)
Prohibits users of algorithmic decision-making from utilizing algorithmic eligibility determinations in a discriminatory manner. Requires users of algorithmic decision-making to send corresponding notices to individuals whose personal information is used. Requires users of algorithmic decision-making to submit annual reports to the Department of the Attorney General. Provides means of civil enforcement.
Establishes a framework to regulate controllers and processors with access to personal consumer data. Establishes penalties. Establishes the Consumer Privacy Special Fund to be administered by the Department of the Attorney General. Appropriates funds.
Requires certain social media platforms to provide an accessible mechanism for users to delete their accounts on the platform and permanently erase all personal information and sensitive personal information associated with deleted accounts. Prohibits certain deceptive practices by social media platforms that obstruct the deletion of user accounts. Authorizes the Attorney General to pursue civil actions and seek injunctive relief and penalties for violations. Effective 7/1/2027. (CD2)
Prohibits surveillance pricing, or differential pricing based on information collected with electronic surveillance technology. Deems surveillance pricing an unfair and deceptive practice. Provides certain exemptions.
Establishes the Hawaii Drop and Delete Act to limit the information data brokers collect and sell regarding consumer information. Establishes a deletion mechanism allowing consumers to request data brokers to drop their personal information. Establishes the consumer privacy fund. Establishes a private right of action.
Revises the Hawaii Patients' Bill of Rights and Responsibilities Act by: (1) Establishing new provisions on telehealth parity, prior authorization timelines, and automated decision systems; (2) Enhancing medical data protection and privacy standards; (3) Expanding the insurance commissioner's enforcement authority; and (4) Improving network adequacy, internal and external appeals procedures, and reporting requirements.